Telemetry, edge peering cache, and BGP anycast termination point. Public HTTP administrative endpoints are disabled on perimeter clusters.